Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/28d96272-161b-3891-8090-89041daa39a7.roa
File:                     28d96272-161b-3891-8090-89041daa39a7.roa (raw, json)
Hash identifier:          KVJ2hmOycRKsY1EhxwuTz43D8ffx9mbQQFiYalyeDI4=
Subject key identifier:   C2:4A:F3:45:35:21:8F:35:98:4D:51:47:C5:43:07:38:95:A8:C4:13
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584ECD372E43C821FAA854D22980
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/28d96272-161b-3891-8090-89041daa39a7.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        164.55.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:2e:43:c8:21:fa:a8:54:d2:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=14bdea89-3905-4ae5-a99c-7ec995328919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:76:b9:25:0c:f7:19:46:5d:3d:fe:42:58:f7:
                    0c:77:e1:ab:ac:7b:07:4a:d9:4c:0a:97:4f:31:87:
                    fe:42:93:c0:d3:36:af:cb:9a:d6:83:81:d4:9e:73:
                    d5:27:01:72:8e:58:86:94:ef:80:a9:84:44:2f:6f:
                    17:87:e8:97:e0:0a:c8:1a:e0:f8:b6:79:b3:9b:eb:
                    0d:35:74:4c:d8:a4:c6:a2:d0:50:7e:6e:3c:a7:60:
                    41:96:04:8d:1a:c6:cf:78:bc:e9:78:c6:47:26:53:
                    fc:5c:a0:22:d5:d6:b9:9b:1e:55:2c:81:56:1c:66:
                    a3:7b:ea:93:96:13:56:31:4d:3e:3d:e7:23:7d:20:
                    69:25:ac:0d:d5:f6:12:5a:a1:5b:b8:89:95:e5:3e:
                    45:2b:9f:7a:bb:b0:2c:5e:79:f8:4d:56:e9:1c:01:
                    35:b1:8a:c6:65:0a:64:65:c2:48:16:fe:37:b9:55:
                    bb:01:bc:b0:d8:6d:22:39:1c:9f:05:f5:f9:8e:6d:
                    d0:b5:06:d1:46:34:70:b1:f1:96:21:23:1b:bd:3f:
                    ef:49:84:07:45:f2:55:dd:9f:13:14:84:42:5d:6a:
                    f7:0b:e3:aa:98:70:78:f9:18:37:9b:d3:eb:64:9e:
                    a0:45:d5:72:3e:80:b4:ea:02:ad:bc:f0:ba:16:a7:
                    5e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4A:F3:45:35:21:8F:35:98:4D:51:47:C5:43:07:38:95:A8:C4:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/28d96272-161b-3891-8090-89041daa39a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:9f:85:c7:4a:58:c2:e7:22:8e:52:39:49:1b:e6:ff:61:85:
         cd:e7:a2:3c:bf:0c:17:d3:0d:8a:2f:e7:bf:91:bc:58:1d:ef:
         ce:2c:7d:d2:44:67:5b:77:44:16:22:ba:8b:0a:0b:e6:02:b8:
         8d:91:18:2b:45:e3:e5:c0:38:ef:21:4a:f4:14:d2:e6:04:f2:
         4b:0d:38:f2:0c:f2:e4:6d:7b:b7:b5:b8:7d:fa:1e:e2:56:74:
         27:0c:a8:ba:52:2b:4d:ac:f6:a4:f6:4d:82:09:e4:61:3c:c3:
         28:d3:ee:5a:7c:c2:b5:fa:3d:e4:5a:1e:79:7c:ee:90:4a:ab:
         22:2f:dd:4a:36:ce:ad:66:bb:19:3f:ed:10:b0:1a:ab:95:07:
         83:c0:0b:24:e7:1c:46:2a:64:50:2f:c6:e9:58:0b:3e:66:c8:
         95:ba:b8:11:90:fb:ae:05:c5:34:a4:af:51:9c:11:e9:48:0d:
         71:3e:60:b4:db:10:f7:2f:3b:0a:1e:6e:69:33:2a:b8:20:eb:
         b2:33:2c:f4:78:3e:ff:9d:8f:b2:b4:3c:94:22:6a:b9:04:51:
         8e:47:02:32:4b:81:09:d7:4b:58:2c:10:25:d6:c2:fd:4f:17:
         4b:ab:e4:65:e4:06:60:8c:6f:cc:d7:90:89:4e:7b:ff:dc:75:
         a6:a7:98:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNy5DyCH6qFTSKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjBjYTAyZTctN2ExMi00ZDkwLThmZWItOGYxMzBhYWVh
MzgwMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk
MTRiZGVhODktMzkwNS00YWU1LWE5OWMtN2VjOTk1MzI4OTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXa5JQz3GUZdPf5CWPcMd+GrrHsHStlMCpdP
MYf+QpPA0zavy5rWg4HUnnPVJwFyjliGlO+AqYREL28Xh+iX4ArIGuD4tnmzm+sN
NXRM2KTGotBQfm48p2BBlgSNGsbPeLzpeMZHJlP8XKAi1da5mx5VLIFWHGaje+qT
lhNWMU0+PecjfSBpJawN1fYSWqFbuImV5T5FK596u7AsXnn4TVbpHAE1sYrGZQpk
ZcJIFv43uVW7Abyw2G0iORyfBfX5jm3QtQbRRjRwsfGWISMbvT/vSYQHRfJV3Z8T
FIRCXWr3C+OqmHB4+Rg3m9PrZJ6gRdVyPoC06gKtvPC6FqdeRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMJK80U1IY81mE1RR8VDBziVqMQTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNh
MDJlNy03YTEyLTRkOTAtOGZlYi04ZjEzMGFhZWEzODAvMjhkOTYyNzItMTYxYi0z
ODkxLTgwOTAtODkwNDFkYWEzOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjBjYTAyZTctN2ExMi00ZDkwLThm
ZWItOGYxMzBhYWVhMzgwL2IwY2EwMmU3LTdhMTItNGQ5MC04ZmViLThmMTMwYWFl
YTM4MC5jcmwwHwYDVR0jBBgwFoAU7+jFlj49ZhUup1G+nGYMlTKJpFswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNhMDJlNy03YTEyLTRkOTAtOGZlYi04ZjEz
MGFhZWEzODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApDfhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAifhcdKWMLnIo5SOUkb5v9hhc3nojy/DBfTDYov57+RvFgd784sfdJE
Z1t3RBYiuosKC+YCuI2RGCtF4+XAOO8hSvQU0uYE8ksNOPIM8uRte7e1uH36HuJW
dCcMqLpSK02s9qT2TYIJ5GE8wyjT7lp8wrX6PeRaHnl87pBKqyIv3Uo2zq1muxk/
7RCwGquVB4PACyTnHEYqZFAvxulYCz5myJW6uBGQ+64FxTSkr1GcEelIDXE+YLTb
EPcvOwoebmkzKrgg67IzLPR4Pv+dj7K0PJQiarkEUY5HAjJLgQnXS1gsECXWwv1P
F0ur5GXkBmCMb8zXkIlOe//cdaanmKE=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:15:50 2026 by rpki-client